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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133), 
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DETAILED ACTION 
Restriction election 

1 . The examiner had a phone interview on February 26, 2008 regarding restricting 
this application. Applicant elected Group I, claims 1-9, without traverse. Claims 1-20 
are pending. Claims 10-20 are nonelected. Claims 1-9 are examined in the instant 
application. This restriction is made FINAL. 

Specification 

2. Applicant is required to update the status (pending, allowed, etc.) of all parent 
priority applications in the first line of the specification. The status of all citations of US 
filed applications in the specification should also be updated where appropriate. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented 
and the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1, 3-5, 7, and 9 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Tsiounis in view of Stolfo et al. (U.S. PG-Pub 2004/0002903 A1 
hereafter Stolfo the application is a continuation of an application filed 7/26/1999). 

As per claim 1 Tsiounis teaches: 
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A process for protecting tine cliaracteristics of a transaction accessing assets in 
an account or information corresponding to an account, eitlier lield by an account 
custodian, including a credit card account, comprising tine steps of: 
mapping at least one identification code to at least one diversionary identification code; 
{See Tsiounis paragraph 40. The redirecting to another webpage is mapping to another 
webpage identification code.) 

storing said mapping on an intercept system, said intercept system connected to said 
network and including data storage and a computer system; (See Tsiounis Figure 3) 
when said diversionary identification code is entered into an access device, said 
diversionary identification code instructs said access device to route the access 
transaction to said intercept system; {See Tsiounis paragrapli 40) 
when said access transaction is routed to said intercept system, said intercept system 
compares at least one diversionary identification code to said mapping; {See Tsiounis 
paragraph 45) 

wherein if said mapping indicates that said access transaction meets a masking criteria, 
said access transaction will be processed through said intercept system according to a 
set of masking instructions, wherein said masking instructions include contacting said 
account custodian via a network with masked transaction information. {See Tsiounis 
paragraphs 96 and 88. The customer sends the transaction information to the trusted 
third party that collects the payment from the account and then pays the merchant. The 
instructions are how the payment is to be made if absolute secrecy is required the use 
of a prepaid card by an anonymous customer would make for absolute anonymity.) 
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While Tsiounis does not explicitly teach having the trusted third party or proxy act 
as the vendor to be paid by the credit card company and then having the trusted third 
party pay the vendor but that is taught by Stolfo. (See Stolfo paragraph 78) Therefore it 
would have been obvious at the time the invention was made to use a trusted third party 
as an intermediary to hide transaction details from an account custodian as well as the 
merchant involved. As per claim 3 Tsiounis teaches: 

The process for protecting the characteristics of a transaction as recited in claim 
1 , wherein said masking instructions include processing said transaction according to 
any instructions processed at said access device. (Choosing to use the third party 
payment system is choosing to mask the transaction. See Tsiounis paragrapli 42) 

As per claim 4 Tsiounis teaches: 

The process for protecting the characteristics of a transaction as recited in claim 
3, wherein said account custodian will record said intercept system as said access 
device. (See Tsiounis paragrapli 88) 

As per claim 5 Tsiounis teaches: 

The process for protecting the characteristics of a transaction as recited in claim 
3, wherein said intercept device has a plurality of locations. (See Tsiounis Abstract. It is 
on a network allowing it to provide a location to any device on that network that can 
connect to it.) 

As per claim 9 see the rationale of claim 1 as parallel system and method claims. 
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5. Claims 2, 6, and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Tsiounis in view of Stolfo and Official Notice. 

As per claim 2 Tsiounis teaches: 

The process for protecting the characteristics of a transaction as recited in claim 
1 , wherein said at least one identification code includes at least a portion of the 
information included on the encoded magnetic stripe of a card used in financial 
transactions. {See Tsiounis paragrapli 23. ) 

While Tsiounis and Stolfo teach sending many pieces of data to the trusted third 
party it is not explicit about what pieces of data would be on a credit card. Official 
Notice is taken that it is old and well known in the art that the encoded magnetic strip of 
a card used in financial transactions includes an account number. Therefore it would 
have been obvious to a person of ordinary skill in the art at the time the invention was 
made to send data that is encoded on a credit card to allow a user to charge a purchase 
to their credit card. 

As per claim 6 Tsiounis teaches: 

The process for protecting the characteristics of a transaction as recited in claim 
3, wherein said intercept device records said instructions from said access device in an 
encoded form. {See Tsiounis paragraplis 23 and 96.) 

While Tsiounis and Stolfo teach sending many pieces of data to the trusted third 
party it is not explicit about what pieces of data would be on a credit card. Official 
Notice is taken that the encoded magnetic strip of a card used in financial transactions 
includes an account number. Therefore it would have been obvious to a person of 
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ordinary skill in the art at the time the invention was made to send data that is encoded 
on a credit card to allow a user to charge a purchase to their credit card. 
As per claim 7 Tsiounis teaches: 

The process for protecting the characteristics of a transaction as recited in claim 
6, wherein said encoded transactions may be decoded only by a password supplied to 
an account holder. (See Tsiounis paragraphs 48-51) 

As per claim 8 Tsiounis teaches: 

The process for protecting the characteristics of a transaction as recited in claim 
3, wherein said access device is a POS terminal for a credit card. 

While Tsiounis and Stolfo do not explicitly teach having the access device be a 
POS terminal Official Notice is taken that it is old and well known in the art of POS 
terminals to have such terminals for credit cards where they make money based on 
charging service charges therefore it would be obvious to a person of ordinary skill in 
the art at the time the invention was made to be able to collect payment from a third 
party payment service as taught by Tsiounis in order to increase sales and service 
charges by accepting another form of payment.) 

Conclusion 

6. The pnor art made of record and not relied upon is considered pertinent to 
Applicant's disclosure: 

• Zingher et al. (U.S. Pub. 2002/0038818 A1) teaches having an alternate 
response if given a specific code in place of a pin code. 
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7. Examiner's Note: Tine Examiner lias cited particular columns and line numbers 
in the references as applied to the claims for the convenience of the applicant. 
Although the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant, in preparing the 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the examiner. 

8. Any inquiry concerning this communication from the examiner should be directed 
to Scott S. Trotter, whose telephone number is 571-272-7366. The examiner can 
normally be reached on 8:30 AM - 5:00 PM, M-F. 

9. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James P. Trammell, can be reached on 571-272-6712. 

10. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact the 
Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

1 1 . The fax phone number for the organization where this application or proceeding 
is assigned are as follows: 



(571 ) 273-8300 (Official Communications; including After Final 
Communications labeled "BOX AF") 
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(571 ) 273-6705 (Draft Communications) 



/sst/ 

3/20/2008 

/James P Trammel 1/ 

Supervisory Patent Examiner, Art Unit 3694 



